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In re Application of DURR, et al. 
Application No. 09/801,951 

Amendments to the Claims 

1 . (Currently Amended) A method for loading an executable program 
and associated modification code segments, the method comprising the steps of: 

receiving a set of original program segments referenced by the executable program, 
each of the set of original program segments comprising executable binary code; 

identifying a set of substitute program segments associated with ones of the original 
set of program segments; 

modifying executable binary code of the ones of the original set of program segments 
to include an exception inducing code^ the exception inducing code comprising executable 
binary code; and 

creating an association between ones of the set of original program segments and 
ones of the set of substitute program segments , each association comtarising a policy for 
determining whether to execute the substitute program segment depe nding on an identity of 
a calling module of the original program segment . 

2. (Canceled) 

3. (Original) The method of claim 1 wherein the substitute program 
segments comprise functions. 

4. (Original) The method of claim 3 wherein the functions comprise 
application program interfaces. 

5. (Original) The method of claim 4 wherein the appl ication program 
interfaces are part of an operating system. 

6. (Original) The method of claim 1 wherein the creating an association step 
comprises building a table entry including a called original program segment reference and a 
substitute program segment reference. 
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7. (Original) The method of claim 6 wherein the called original program 
segment reference comprises an address. 

8. (Original) The method of claim 6 further comprising storing a portion of 
the original program segment replaced by the exception inducing code in table entry. 

9. (Original) The method of claim 6 forther comprising storing a condition 
description specifying a program execution state under which a substitute program segment 
will not be executed in place of an associated called original program segment 

10. (Original) The method of claim 1 wherein the identifying step comprises 
searching a program modification database including a set of identified programs and 
corresponding substitute program segments, 

11. (Previously Presented) The method of claim 1 further comprising the 
steps of: 

loading the executable program Into active process space; 

identifying an in-memoiy patch within the program modification database 
corresponding to the executable program; and 

inserting the in-memory patch within the executable program residing in the active 
process space. 

12. (Currently Amended) A method for loading an executable program 
comprising executable binary code and having associated modification code segments, the 
method comprising the steps of: 

loading, for execution, a copy of the executable program in active process space; 
identifying a set of modifications corresponding to the executable program; 'an^ 
modifying executable binary code of the copy of the executable program in active 
process space to include an exception inducing code, wherein the exception inducing code 
comprises executable binary code that induces execution of an exception handling routine 
for determining and executing at least a corresponding one of the set of modifications : and 
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associating^ with each of the set of modtfications. a policy for determining whether to 
execute the modified executabte binary code depending on an identity of a calling module of 
the modified executable binary code . 

13. (Currently Amended) A method for implementing execution of 
substitute program segments associated with an active executable program, wherein the 
active ojcGcutablo program hoQ boon modified to include exception inducing code that 
induces on c? t OQption hond l od by an exooption hondling routine, the method comprising the 
steps of: 

calling, from a calling module having an identity, an original program segment of the 
active executable program that has been modified to include an exception inducing code, the 
exception inducing code comprising executable binary code that induces an exception 
handled bv an exception handling routine: 

detecting on instance of the exception inducing code; 

^6f5t determining a corresponding substitute program segment entry in a program 
segment substitution list; 

determining whether to execute a substitute program segment associated with the 
corresponding substitute program segment entry depending on the identity of the calling 
module; and 

if so determined, executing e tiie substitute program segment ossooiatod witli th e 
corr e sponding nubgtitutc program gegmont in place of an the original program segment 
oaaooiutGd with the exception inducing cod e> 

1 4. (Currently Amended) The method of claim 1 3 fiirther oomp fismg 
second wherein determining whether to execute a substitute program segment comprises 
determining, by reference to an exclusion/inclusion policy associated with the instance of the 
exception inducing code, whether to perform the substitute program segment in place of the 
original program segment^ wherein the exclusion/inclusion policy identifies at least a 
condition depending on the identity of the calling module under which the corresponding 
substitute program segment will not be executed in place of an associated original program 
segment. 
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1 5. (Original) The method of claim 1 4 wherein the coiresponding substitute 
program segment entry includes a portion of the original program segment replaced by the 
exception inducing code, and further comprising the step of determining that the condition 
under which the eorrcsponding substitute program segment will not be executed has been 
fulfilled, and in response restoring within a program code execution stream the portion of the 
original program segment replaced by the exception inducing code. 

1 6. (Original) The method of claim 13 wherein the substitute program 
segments comprise functions. 

17. (Original) The method of claim 1 6 wherein the functions comprise 
application program interfaces. 

18. (Original) The method of claim 1 7 wherein the application prog.-am 
interfaces are part of an operating system. 

19. (Original) The method of claim 13 wherein the corresponding substitute 
program segment entry includes a called original program segment reference and a 
substitute program segment reference. 

20. (Currently Amended) A computer-readable medium having computer- 
executable instructions for facilitating loading an executable program and associated 
modification code segments, the computer-executable instructions facilitating performing 
the steps of: 

receiving a set of original program segments referenced by the executable program, 
each of the set of original program segments comprising executable binary code; 

identifying a set of substitute program segments associated with ones of the original 
set of program segments; 
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modiiytng executable binary code of the ones of the original set of program segments 
to include an exception inducing code, the exception inducing code comprising executable 
binary code; and 

creating an association between ones of the set of original program segments and 
ones of the set of substitute program segments ^ each association comprising a policy for 
determining whether to execute the substitute program segment depending on an identity of 
a calling module of the original program segment . 

2L (Canceled) 

22. (Original) The computer-readable medium of claim 20 wherein ■the 
substitute program segments comprise functions. 

23. (Original) The computer-readable medium of claim 22 wherein the 
functions comprise application program interfaces. 

24. (Original) The computer-readable medium of claim 23 wherein the 
application program Interfaces are part of an operating system. 

25. (Original) The computer-readable medium of claim 20 wherein the 
creating an association step comprises building a table entry including a called original 
program segment reference and a substitute program segment reference. 

26. (Original) The computer-readable medium of claim 25 wherein the called 
original program segment reference comprises an address. 

27. (Original) The computer-readable medium of claim 25 further 
comprising computer-executable instructions facilitating: 

storing a portion of the original program segment replaced by the exception inducing 
code in table entry. 
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28. (Original) The method of claim 25 further comprising computer- 
executable instructions facilitating: 

storing a condition description specifying a program execution state under which a 
substitute program segment will not be executed in place of an associated called original 
program segment. 

29. (Original) The computer-readable medium of claim 20 wherein the 
identifying step comprises searching a program modification database including a set of 
identified programs and corresponding substitute program segments. 

30. (Original) The computer-readable medium of claim 20 further 
comprising computer-executable instructions facilitating: 

loading an executable program into active process space; 

identifying an in-memory patch within the program modification database 
corresponding to the executable program; and 

inserting an in-memory patch within the executable program residing in the active 
process space. 

3 1. (Currently Amended) A computer-readable medium having computer- 
executable instructions for facilitating implementing execution of substitute program 
segments associated with an active executable program, whe r e- k i- th ^ activ e e x e cutobl e 
program has been modi fi od to includ e e xoeption - inducing cod e thot i nduoes an exooption 
handled by an oxception handling routine, the computer-executable instructions facilitating 
performing the steps of: 

calling, from a calling module having an identity^ an original program segment of the 
acttve executable program that has been modified to include an exception inducing code, the 
exception inducing code comprising executable binary code that induces an exception 
handled bv an exception handling routine: 

detecting an instanQc of the exception inducing code; 

first determining a corresponding substitute program segment entry in a program 
segment substitution list; 
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determining whether to execute a substitute program segment associated vyith the 
corresponding substitute program segment entry depending on the ^i^eti^ity of the calling 
module: a nd 

if so determined, executing a tiie substitute program segment osooc i a t od with th e 
corrogpondlng substitut e pr -eg=a m g e gmcnt in place of an the original program segment 
oooooiatod with th e exooption mduoing oodo . 

32. (Currently Amended) The computer-readable medium of claim 31 
farther ^n^p^^^rinc nnmpi i fflr . f>vpniJtghlQ I'nfltnictionfl faoilitoting: oocond wherein 
determijiinp whether to execute a substitute program segment comprises determining, by 
reference to an exclusion/inclusion policy associated with the instance of the exception 
inducing code, whether to perform the substitute program segment in place of the original 
program segment, wherein the exclusion/inclusion policy identifies at least a condition 
depending on the identity of the catling module under which the corresponding subistitute 
program segment will not be executed in place of an associated original program segment 

33. (Original) The computer-readable medium of claim 32 wherein the 
corresponding substitute program segment entry includes a portion of the original program 
segment replaced by the exception inducing code, and further comprising computer- 
executable instructions facilitating: 

determining that the condition under which the corresponding substitute pro|ram 
seginent will not be executed has been ftilfilled, and in response restoring within a program 
code execution stream the portion of the original program segment replaced by the exception 
inducing code. 

34. (Original) The computer-readable medium of claim 32 wherein the 
substitute program segments comprise functions. 

35. (Original) The computer-readable medium of claim 34 wherein the 
ftmctions comprise application program interfaces. 
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36. (Original) The computer-readable medium of claim 35 wherein the 
application program interfaces are part of an operating system. 

37. (Original) The computer-readable medium of claim 3 1 wherein the 
corresponding substitute program segment entry includes a called original program segment 
reference and a substitute program segment reference, 

38. (Currently Amended) A program execution system facilitating 
modifying an executable program, including a set of original program segments referenced 
by the executable program, each of the set of original program segments comprising 
executable binary code, the program execution system comprising: 

a program modification database for storing a set of substitute program segments 
associated with ones of the original set of program segments; 

a program loader for installing a copy of the executable program into an active 
process space; 

a program code modifier for altering, within the active process space, executable 
binary code of the ones of the original set of program segments to include an exception 
inducing code, the exception inducing code comprising executable binary code; and 

a substitution list including entries describing an association between ones of the set 
of original program segments and ones of the set of substitute program segments^ich 
^association compri^^inB a nolicv fnr determining whether to execute the substitute program 
se gment depending on an identity of a calling m o dule of th e oripinal program seRment . 

39. (Canceled) 

40. (Original) The program execution system of claim 38 wherein the 
substitute program segments comprise functions. 

4 1 . (Original) The program execution system of claim 40 wherein the 
fiinctions comprise application program interfaces. 
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42. (Original) The program execution system of claim 4 1 wherein the 
application program interfaces are part of an operating system. 

43. (Original) The program execution system of claim 38 wherein individual 
entries within the substitution list included a called original program segment reference and 
a substitute program segment reference. 

44. (Original) The program execution system of claim 43 wherein individual 
entries within the substitution list include a portion of the original program segment replaced 
by the exception inducing code. 

45. (Original) The program execution system of claim 38 further comprising: 
an in-memory patch within the program modification database corresponding to the 

executable program; and 

an in-memory patching function for inserting the in-memory patch within the executable 
program residing in the active process space. 
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